$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: QnJxxNxqaY8s7F8EIbSr6szbc2CmScAxN7qpVmiEEQo= Subject key identifier: A5:6A:2D:82:9E:C4:57:1E:FC:3A:71:C2:AF:4F:F8:56:81:21:9A:F0 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 01B2 Signing time: Sun 19 Oct 2025 05:36:34 +0000 Manifest this update: Sun 19 Oct 2025 05:36:33 +0000 Manifest next update: Sun 26 Oct 2025 05:36:33 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: rzT/5Rj/643hxFFqZO3M/Ca7z7UDYSFA+81ENORaV6M=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Oct 19 05:36:33 2025 GMT Not After : Oct 26 05:36:33 2025 GMT Subject: CN=68f478e1-a604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:4b:55:71:2b:02:17:5d:ad:a7:f0:00:40: c3:c1:28:4f:ba:17:be:09:e7:05:e2:c4:75:ed:03: 05:3b:a3:87:6a:dd:ed:ef:21:10:d3:61:55:58:f7: 9b:fa:65:27:69:05:3f:ed:bf:12:9f:43:ba:cc:88: 8b:f1:01:78:74:9b:15:f6:7b:03:20:1d:25:84:96: b2:c8:cc:54:fe:70:da:89:91:60:ff:6a:17:30:1a: 12:71:f2:ae:75:07:c4:f5:51:30:39:39:8b:dd:ce: 8d:dd:b9:6a:44:ed:c5:65:3f:ee:f8:43:ea:66:83: de:dd:c2:af:70:3c:1b:1d:8c:8e:ba:bc:8e:b6:38: 6c:09:8e:02:26:8b:f1:80:4e:eb:13:4b:a0:01:d8: 71:37:16:82:78:b4:d9:aa:79:98:f5:5e:52:74:f4: af:32:0e:b9:81:6b:26:e3:64:72:a6:9a:43:5a:d6: 75:51:b4:3e:99:04:f0:26:31:ac:22:bc:65:37:a4: 23:8c:8a:b1:91:56:75:68:51:14:d7:cf:ff:ff:b6: bd:c1:18:4e:76:5f:d1:9c:9b:c2:21:89:e7:97:3b: f8:78:c2:bc:81:dd:60:97:59:46:80:82:13:c9:25: 6d:d4:69:7d:26:35:7a:84:07:cc:e7:c1:3a:44:bb: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6A:2D:82:9E:C4:57:1E:FC:3A:71:C2:AF:4F:F8:56:81:21:9A:F0 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:b4:9c:20:99:9a:19:b6:2a:7d:7b:70:da:cf:43:f4:ba: a6:ca:7c:07:85:05:73:54:32:dd:13:8d:a9:65:9e:fb:54:d8: 0b:9e:14:1d:6a:cd:a5:52:4b:ce:ef:2f:92:48:da:d2:f2:d9: 53:a8:01:87:9b:88:6d:4f:ce:f3:4e:c0:8c:b6:15:4d:b3:34: 42:15:25:c0:70:a1:65:1d:1f:2e:2a:4d:a8:18:99:da:3b:c3: 08:a6:ff:e2:b0:f7:47:c6:ee:36:c2:93:1a:95:60:b5:e8:ab: 4a:c3:4c:b1:3f:32:12:60:83:f2:a2:47:9c:20:ed:b7:c4:00: d6:4f:be:f8:8c:54:e1:a4:fd:c5:07:1d:1b:8a:7d:0d:14:84: 79:0f:2b:0a:14:58:8f:69:6f:c4:84:3c:d3:15:67:b9:76:b6: 8d:91:34:e4:56:11:fc:7e:2d:6f:0b:9b:e5:19:5c:2b:bf:64: 36:9d:ce:e5:0e:db:bc:3f:bb:11:1c:b9:ee:d7:56:ea:54:e0: 7a:14:94:e0:ee:64:2d:f1:d4:59:08:e5:29:59:3d:10:ea:2f: ca:72:f6:68:bf:bf:a0:e8:51:1e:c1:67:0e:b9:75:41:b9:77: b3:bb:c9:eb:57:af:66:44:23:85:ab:85:0e:63:df:eb:0f:16: 0d:17:f0:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUxMDE5MDUzNjMzWhcNMjUxMDI2MDUzNjMzWjAYMRYwFAYD VQQDEw02OGY0NzhlMS1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ9LVXErAhddrafwAEDDwShPuhe+CecF4sR17QMFO6OHat3t7yEQ02FVWPeb +mUnaQU/7b8Sn0O6zIiL8QF4dJsV9nsDIB0lhJayyMxU/nDaiZFg/2oXMBoScfKu dQfE9VEwOTmL3c6N3blqRO3FZT/u+EPqZoPe3cKvcDwbHYyOuryOtjhsCY4CJovx gE7rE0ugAdhxNxaCeLTZqnmY9V5SdPSvMg65gWsm42RypppDWtZ1UbQ+mQTwJjGs IrxlN6QjjIqxkVZ1aFEU18///7a9wRhOdl/RnJvCIYnnlzv4eMK8gd1gl1lGgIIT ySVt1Gl9JjV6hAfM58E6RLs7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVqLYKe xFce/Dpxwq9P+FaBIZrwMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFbrScIJmaGbYqfXtw2s9D9LqmynwHhQVzVDLdE42pZZ77VNgLnhQd as2lUkvO7y+SSNrS8tlTqAGHm4htT87zTsCMthVNszRCFSXAcKFlHR8uKk2oGJna O8MIpv/isPdHxu42wpMalWC16KtKw0yxPzISYIPyokecIO23xADWT774jFThpP3F Bx0bin0NFIR5DysKFFiPaW/EhDzTFWe5draNkTTkVhH8fi1vC5vlGVwrv2Q2nc7l Dtu8P7sRHLnu11bqVOB6FJTg7mQt8dRZCOUpWT0Q6i/KcvZov7+g6FEewWcOuXVB uXezu8nrV69mRCOFq4UOY9/rDxYNF/C9 -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:35 2025 by rpki-client